French supermarkets face refrigeration outages following 'unprecedented' cyberattack

FRANCE, 13 OCTOBER 2026 —

French Supermarket Cyberattack Forces Mass Food Waste as Refrigeration Systems Fail Nationwide

The attack, which Paris prosecutors confirmed as a coordinated cyber intrusion, targeted refrigeration control systems supplied by Danish manufacturer Danfoss, forcing retailers to discard perishable goods and triggering fires in some stores. The scale of the disruption—affecting at least 300 Intermarche and Netto outlets, over 100 Cooperative U stores, and multiple E. Leclerc locations—has intensified scrutiny over food security and the risks posed by unpatched industrial software.

Danfoss acknowledged that the affected systems, including its AK-SM800 and AK-SC355 fridge regulators, relied on outdated firmware that no longer received security updates. The company’s statement noted that it had previously advised retailers to upgrade from these legacy models, but many stores remained dependent on them.

A source close to French Prime Minister Sébastien Lecornu disclosed that France’s cybersecurity agency had already identified the software vulnerability and was coordinating with European partners to assess potential cross-border risks. Authorities are now working to identify additional French companies using the same systems to prevent further exploitation.

The incident has drawn sharp criticism from the European Union’s food and agriculture commissioner, Christophe Hansen, who condemned the attack on X (formerly Twitter) as an "exploitation of food" and warned that such incidents were becoming a "reality." Hansen emphasized the need for heightened attention to food security at all levels, a call echoed by retailers forced to discard thousands of tons of spoiled produce.

Intermarche confirmed that affected stores would have to discard all fresh and frozen items, while a specialist retail news outlet reported that Carrefour Market and Monoprix were also impacted—though those companies have not yet issued official statements.

A person close to the investigation revealed that hackers remotely triggered forced defrosting cycles in refrigeration units, causing temperatures to spike and accelerating food degradation. The attack’s method suggests a targeted exploit of industrial control systems, a growing concern as cybercriminals increasingly target critical infrastructure. Danfoss did not disclose the exact number of affected systems but noted that the compromised equipment was predominantly legacy hardware, leaving retailers vulnerable to prolonged disruptions.

The fallout extends beyond financial losses, with retailers facing reputational damage amid public concerns over food waste and supply chain reliability. Cooperative U’s CEO, Dominique Schelcher, described the attack as a "black swan event" that underscored the urgent need for systemic upgrades in food distribution technology. Meanwhile, French authorities are accelerating efforts to trace the attack’s origin and assess whether similar vulnerabilities exist in other sectors, including healthcare and energy.

The incident follows a broader trend of cyberattacks on critical infrastructure, with recent cases highlighting the risks of unsecured industrial systems. As France’s cybersecurity agency expands its investigation, the supermarket sector is now under pressure to accelerate digital modernization to prevent future disruptions. The attack serves as a stark reminder of the interconnected risks facing global supply chains in an era of escalating cyber threats.

Related: France